Lucene search
K

28676 matches found

OSV
OSV
added 2025/10/30 3:2 p.m.7 views

GO-2025-4074 Rancher exposes sensitive information through audit logs in github.com/rancher/rancher

Rancher exposes sensitive information through audit logs in github.com/rancher/rancher...

4.3CVSS6.7AI score0.00256EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/10/30 7:11 a.m.5 views

CVE-2025-11702

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects...

8.8CVSS9AI score0.0053EPSS
Exploits0References1
NVD
NVD
added 2025/10/29 7:15 a.m.6 views

CVE-2025-11702

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects...

8.8CVSS0.0053EPSS
Exploits0References3
OSV
OSV
added 2025/10/29 7:15 a.m.2 views

UBUNTU-CVE-2025-11702

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects...

8.8CVSS7.3AI score0.0053EPSS
Exploits0References2
CVE
CVE
added 2025/10/29 7:4 a.m.50 views

CVE-2025-11702

GitLab EE versions affected: 17.1–before 18.3.5, 18.4–before 18.4.3, and 18.5–before 18.5.1. An authenticated attacker with specific permissions could hijack project runners from other projects. Remediation: fixed in GitLab patch releases—18.3.5 (for 17.1 line), 18.4.3, and 18.5.1. See referenced...

8.8CVSS8.9AI score0.0053EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/10/29 7:4 a.m.10 views

CVE-2025-11702 Missing Authorization in GitLab

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects...

8.5CVSS0.0053EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/29 7:4 a.m.3 views

EUVD-2025-36603

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects...

8.5CVSS6.3AI score0.0053EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/29 7:4 a.m.3 views

CVE-2025-11702 Missing Authorization in GitLab

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects...

8.5CVSS8.8AI score0.0053EPSS
Exploits0References3
OSV
OSV
added 2025/10/29 7:4 a.m.3 views

CVE-2025-11702 Missing Authorization in GitLab

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects...

8.5CVSS9AI score0.0053EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.9 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab versions 17.1 through before 18.3.5,...

8.8CVSS9.1AI score0.0053EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2025/10/28 9:51 p.m.162 views

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-4...

7.8CVSS7.1AI score0.19924EPSS
Exploits15
CVE
CVE
added 2025/10/28 8:8 p.m.21 views

CVE-2025-62368

Taiga CVE-2025-62368 affects Taiga Open Source Project Management

9CVSS7.7AI score0.00715EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/10/28 2:38 a.m.3 views

CVE-2025-62971

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrestaProject Attesa Extra attesa-extra allows Stored XSS.This issue affects Attesa Extra: from n/a through = 1.4.7...

6.5CVSS5.9AI score0.00134EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/28 12:0 a.m.1 views

CVE-2025-61104

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyunknowntlv function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...

6.7AI score0.00528EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2025/10/27 8:15 p.m.3 views

CVE-2025-61102

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextlinkadjsid function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...

7.5CVSS5.9AI score0.00415EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2025/10/27 8:15 p.m.4 views

CVE-2025-61105

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtylinkinfo function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...

7.5CVSS5.9AI score0.00415EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2025/10/27 8:15 p.m.4 views

CVE-2025-61101

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextlinkrmtitfaddr function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...

7.5CVSS5.9AI score0.00415EPSS
Exploits1References3
OSV
OSV
added 2025/10/27 8:15 p.m.0 views

UBUNTU-CVE-2025-61102

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextlinkadjsid function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...

7.5CVSS5.8AI score0.00415EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2025/10/27 7:16 p.m.4 views

CVE-2025-61100

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospfopaquelsadump function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS under specific malformed LSA conditions...

7.5CVSS5.9AI score0.00415EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2025/10/27 7:16 p.m.4 views

CVE-2025-61099

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaqueinfodetail function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted LS Update packet...

7.5CVSS5.9AI score0.00415EPSS
Exploits1References3
Rows per page
Query Builder